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INTRODUCTION 


It is curious how often what seem to be very different branches of 
mathematics become interlinked by some problem. For more than 
2000 years it had been known how to construct both an equilateral triangle 
and a regular pentagon inscribed in a given circle using only compass and 
straightedge. But as the seventeenth century drew to its close constructions 
were still not known for any other regular polygon with a prime number of 
sides. The brilliant French mathematician Fermat had been discussing the 
numbers F„ = 2^ +1 (later to become known as Fermat Numbers) 
believing them all to be prime, unaware of how intricately these numbers 
were woven in the solution of the polygon problem. It required the genius of 
the German mathematician Gauss to see how these numbers could be used 
to solve the construction problem. 


Fermat will appear frequently in 
the remaining units of the course. 
We shall read more about him in 
Unit 4- 


Carl Frederick Gauss (1777-1855) 


Gauss was unquestionably one of the greatest mathematicians of all 
time. His father, a labourer in Brunswick, did not want his son to 
receive an education. But Garl was an infant prodigy, and his mother 
encouraged him in his studies. It is known that as a child of three he 
corrected an error his father made in a wages list, and by age ten he so 
amazed his schoolteacher with his arithmetic prowess that the teacher 
admitted there was no more he could teach the boy. The tale is reported 
that one day, to keep the children occupied, the teacher asked them to 
add up all the numbers from 1 to 100. Gauss handed in his slate 
immediately and to the dismay of the teacher was the only one in the 
class to get the correct answer. It is presumed that Gauss had discovered 
for himself the formula for the sum of the first n natural numbers. 


Before he reached the age of twenty Gauss had, amongst many other 
achievements, conjectured the Prime Number Theorem, proved the Law 
of Quadratic Reciprocity (which we shall meet in Unit 6) and given a 
construction using compass and straightedge for a regular 17-gon to be 
inscribed in a given circle. It was this last result that launched Gauss on 
his career as a mathematician and it is the first result listed in a diary 
he kept of all his discoveries. The diary, which did not come to light 
until some forty years after his death, records brief statements of 
146 results which amply display the genius of Gauss. 

But it is his book ‘Disquisitiones Arithmeticae’, published when he was 
24 years old, for which Gauss is best remembered. In this renowned 
work Gauss laid the foundations of modern Number Theory. It was here 
that he introduced and developed the language and notations of ‘the 
algebra of congruence’, and used this novel approach to produce elegant 
solutions to a variety of number-theoretic problems. Towards the end of 
the book Gauss returned to the construction of the regular 17-gon and 
generalized his earlier result to show exactly which regular A^-gons can 
be constructed with compass and straightedge; the construction is 
possible if, and only if, N = 2^pip2 ■. - Pk, where the primes pi are 
distinct Fermat numbers and r > 0. 

Sadly Gauss’ career as a mathematician was foreshortened as his 
interest was caught by many other siibjects. In particular a succession of 
discoveries gained him a deserved reputation in astronomy, and indeed 
for forty years from 1807 he was the director of the Gottingen 
Observatory. He is also well remembered for his work on magnetism, 
where a unit of magnetic intensity is the ‘gauss’, appropriately named 
after him. Late in life he expressed regret that he had abandoned 
mathematics, described by him as ‘the queen of the sciences, with the 
theory of numbers being the queen of mathematics’. He always held 
number theory in the highest esteem and, not surprisingly, his name will 
feature regularly in the coming sections. 
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In the final section of the previous unit we introduced the idea of a 
remainder sequence, in which numbers were replaced by their remainder on 
dividing by some positive integer n. Observations about the behaviour of 
the remainder sequence were then projected back to reveal properties of the 
original number sequence. This was the underlying idea in Gauss’ 
congruence. He developed an ‘arithmetic of remainders’, which he then put 
to work to ease computations in many areas. 

In this unit we shall introduce Gauss’ notion of congruence and develop 
properties of it which will be useful in problem solving throughout the 
remainder of the course. Here we shall restrict its application to a variety of 
problems involving remainders and, in particular, to solving linear 
congruences (which offer a more general way of looking at linear 
Diophantine equations). Finally, we shall prove the classical Chinese 
Remainder Theorem, which is concerned with the existence of (and how to 
find) solutions to a class of problems which can be modelled as a 
simultaneous system of linear congruences. 
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1 PROPERTIES OF CONGRUENCE 


1.1 Definition and basic properties 

It has been claimed that the result that p divides 2^“^ — 1, for every odd 
prime p, was known to Chinese mathematicians over 2000 years ago. But 
how does one go about confirming instances of this result? If asked to show 
that 2^® — 1 is divisible by 17 it would be feasible to compute 2^® by hand, 
subtract 1, and then carefully divide by 17. But it would be impractical to 
try the same line of attack to confirm that 641 divides 2®^® — 1 because this 
number is so huge. We shall see in this section that such divisions need not 
be as frightening as they first seem; we can investigate divisibility without 
having to compute the quotient involved in the division. We shall develop an 
‘arithmetic of remainders’ in which everything hinges on one key definition: 


If we write a = b (mod n) it is to 
be understood that a and b are 
integers and n is a positive integer, 
for the statement would not make 
sense otherwise. 


Definition 1.1 Congruence modulo n 

Let n be a fixed positive integer and let a and b be any integers. We 
say that a is congruent modulo n to 6 if the difference a — b is divisible 
by n. 

In symbols we write a = b (mod n). 

If a is not congruent modulo n to 6 we say that a is incongruent 
modulo n to b and write a^b (mod n). 


To illustrate the congruence notation consider the case of modulus n = 11. 
We have 

3 = 25 (mod 11), since 3 — 25 = —22 is a multiple of 11, 

and 

7 = —26 (mod 11), since 7 — (—26) = 33 = 3 x 11. 

On the other hand 12 is incongruent modulo 11 to 8, since 12 — 8 = 4, and 4 
is not a multiple of 11. 

Problem 1.1 _ 

For each of the following statements decide whether it is true or false. 

(a) 3 = 29 (mod 8) 

(b) 3 = —29 (mod 8) 

(c) 63 s 37 (mod 13) 

(d) 37 = 63 (mod 13) 

(e) 63 = 63 (mod 37) 

(f) 63 ^ 13 (mod 25) 


Parts (c) and (d) of Problem 1.1 illustrate one apparent property of 
congruence, namely that if a is congruent modulo n to b then b is congruent 
modulo n to a. Part (e) illustrates the further property that any integer is 
congruent modulo n to itself. These are two of a number of general 
properties of congruence which highlight certain similarities with ordinary 
equality, and which we shall prove in our first result. 
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Proof of Theorem 1.1 

(a) a — a = 0 — Oxn, so a = a (mod n). 

(b) If a = b (mod n) then there exists an integer k such that a — b = kn. 
Then 

b — a = —{a — b) = {—k)n, 
so that b = a (mod n). 

(c) If o = 6 (mod n) and b = c (mod n) then there exist integers s and t 
such that 

a — b = sn and b — c = tn. 

Adding these two equations: 

{a — b) + {b — c) = sn + tn. 

That is, 

a — c = (s + t)n, 
so that a = c (mod n). 

(d) If o = 6 (mod n) and c = d (mod n) then there exist integers s and t 
such that 

a — b — sn and c — d = tn. 

Adding these two equations: 

{a + c) — {b + d) = sn + tn = {s + t)n, 
so that 

a + c = b + d (mod n). 

(e) With a —b = sn and c — d = tn as in the proof of property (d), 

ac = (6 + sn){d + tn) = bd + n{bt + sd + stn), 
and so 

ac — bd n{bt + sd+ stn), 
confirming that ac = bd (mod n). 

(f) The case r = 1 is trivially true. Continuing by induction, suppose the 
result is true for r = k, that is, suppose = b^ (mod n) whenever 

a = b (mod n). 

Then 

= aa!^ = bb^ (mod n), by Property (e), 

= 6''+! (mod n). 

This confirms the truth for the case r = fc + 1 and completes the 
induction step. ■ 
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The following problem gives you an opportunity to prove some simple 
properties of congruence working from the definition alone. 


Problem 1.2 _ 

Suppose that a = b (mod n) and m is an integer. Prove the following. 

(a) If m > 0 and m divides n then a = b (mod m). 

(b) If m > 0 then ma = mb (mod mn) and ma = mb (mod n). 

(c) If d > 0 is a common divisor of a, b and n then finod 

a a \ dJ 

(d) gcd(a,n) = gcd(6,n). 

(e) For any integer c, a + c = b + c (mod n). 


Before developing further ideas, let us illustrate a range of problems in 
which properties of congruence can be exploited to ease computation. 

Example 1.1 

Show that 37®^ + 2 is divisible by 13. 

We start by looking for numbers to which 37^^ is congruent modulo 13. Now 
as 37 = —2 (mod 13), Theorem 1.1(f) tells us that 

37^^^ = (-2)^’' = (-1) X 2^^ (mod 13). 

Now 

2‘‘ = 16 = 3 (mod 13), 
and so 

37^^ = (-1) X (2^)® X 2 = (-1) X 3® X 2 (mod 13). 

But 

3^ = 27 = 1 (mod 13), 
so 

37^'^ = 3^ X 3^ X 3^ X (-2) = -2 (mod 13). 

Finally, Theorem 1.1(d) allows us to conclude that 
37^^ + 2 = (-2) + 2 = 0 (mod 13), 

which amounts to saying that 37^^ + 2 is divisible by 13. ♦ 

In the final step of Example 1.1 we inferred from a statement of the form 
a = 0 (mod n), that n divides a. This is an immediate consequence of the 
definition of congruence. Indeed we have a characterization of congruence 
modulo n in terms of the remainders on dividing by n, as given by the 
following. 


Theorem 1.2 Congruent integers have the same remainders 

a = b (mod n) if, and only if, the integers a and b have the same 
remainder when divided by n. 


Proof of Theorem 1.2 

Suppose first that a and b have the same remainder when divided by n, say 
a = qin + r and b = q 2 n + r, where 0 < r < n. 

Then a — b = {qi — q 2 )n, showing that a = b (mod n). 
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Conversely, suppose that a = b (mod n), so that a — b = kn, for some integer 
k. Let b have remainder r when divided by n, so that 6 = ng + r for some 
integer q. Then, 

a = b + kn = nq + r + kn = {q + k)n + r, 
shows that a has the same remainder, r, as does b. ■ 


1.2 Residue classes 

One outcome of Theorem 1.2 is that every integer is congruent modulo n to 
exactly one of the integers 0,1,2,..., n — 1, namely, whichever one of these 
is its remainder on dividing by n. This set of n integers is called the set of 
least positive residues modulo n. (Strictly speaking, since 0 is not a positive 
integer, it ought to be called the set of least non-negative residues, but this 
misnomer is firmly entrenched in the literature.) 

Furthermore we can split up Z into non-overlapping sets called residue 
(or congruence) classes, where two integers belong to the same class if, and 
only if, they are congruent modulo n. For example, for the case n = 4 the 
residue classes are: 



.,-8, -4,0,4,8,.. 

•} 


.,-7, -3,1,5,9,.. 

■} 


.,-6,-2,2,6,10,. 



.,-5,-1,3,7,11,. 



A set obtained by selecting one member from each of these residue classes, 
for example {0,1,2,3} or {8, —3,22, —9}, is called a complete set of residues 
modulo 4. In general, a set { 01 , 02 , 03 ,..., a„} of n integers is a complete set 
of residues modulo n provided no two of them are congruent modulo n. By 
virtue of Theorem 1.2 this will mean that the integers [ 01 , 02 , 03 ,..., a„} are 
congruent modulo n, in some order, to {0,1,2 ,..., n — 1}. 

In choosing a complete set of residues modulo n, our most frequent selection 
will be the set of least positive residues, {0,1,2,..., n — 1}. However we 
shall have occasion to use the set of least absolute residues obtained by 
choosing, from each residue class, one with least modulus. To be precise, 
from each residue class modulo n we choose the unique member x which lies 
in the range —^n<x< ^n. For example, the set of least absolute residues 
for n = 4 is { — 1,0,1,2} whilst for n = 7 it is {—3, —2, —1,0,1,2,3}. 

Problem 1.3 _ 

Write down the set of least positive residues modulo n, and the set of least 
absolute residues modulo n, for (a) n = 10, and (b) n = 11. 

Problem 1.4 _ 

Determine whether or not each of the following sets is a complete set of 
residues modulo 11. 

(a) {6,2, -3,22,23, -7,7,9,43, -8,16}; 

(b) (0^, l2,2^, 32,42,52,6^, 72,8^, 92,102}; 

(c) (0,1,2,22,2^ 2^ 2^, 2®, 2^ 2», 2^*}. 


Properties (d) and (e) of Theorem 1.1 are of great importance. In essence 
they say that the residue class to which a sum a -I- c, or a product ac, belongs 
does not depend so much on the individual numbers a and c but rather on 
the residue classes to which they belong. To qualify this remark, let us 
denote by [r] the residue class modulo n to which the integer r belongs. So 

[r] = {..., r — 2n, r — n, r, r -\-n, r 2n, ...}. 
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This will mean that residue classes are denoted in many different ways; for 
example, taking n = 5, [—1] = [4] = [19] since — 1 = 4 = 19 (mod 5). In this 
notation properties (d) and (e) can be restated as follows. 

(d) If [a] = [6] and [c] = [d] then [a + c] = [6 + d]. 

(e) If [a] = [6] and [c] = [d] then [ac] = [6d]. 

These two facts amount to saying that the operations defined on the set of 
residue classes modulo n by 

[a] + [c] = [a + c] and [a] x [c] = [oc] 

are unambiguous. Whatever numbers are chosen to represent the two 
residue classes, the sum of the numbers will always belong to the same class, 
as will the product of the numbers. 

Let 

Zn = m, [1], [2],...,[n-l]} 

be the set of all residue classes modulo n. Together with the operations of 
addition and multiplication defined above we have an arithmetic on Z„. For 
example, taking n = 4 we have the tables 


+ 

[0] 

[1] 

[2] 

[3] 

X 

[0] 

[1] 

[2] 

[3] 

[0] 

[0] 

[1] 

[2] 

[3] 


[0] 

[0] 

[0] 

[0] 

[1] 

[1] 

[2] 

[3] 

[0] 

[1] 

[0] 

[1] 

[2] 

[3] 

[2] 

[2] 

[3] 

[0] 

[1] 

[2] 

[0] 

[2] 

[0] 

[2] 

[3] 

[3] 

[0] 

[1] 

[2] 

[3] 

[0] 

[3] 

[2] 

[1] 


where, for example, [3] x [2] = [2] is obtained from the definition 
[3] X [2] = [3 X 2] = [6] 

and the fact that [6] = [2] since 6 = 2 (mod 4). 

Problem 1.5 _ 

Working in Zio, determine [6] + [8] and [6] x [8] and find all [6] such that 
[6] X [b] = [8]. 

Repeat the above, this time working in Zn. 


Diversion 


1 X 8 

+ 

1 

= 

9 

12 X 8 

+ 

2 

= 

98 

123 X 8 

+ 

3 

= 

987 

1234 X 8 

+ 

4 

= 

9876 

12345 X 8 

+ 

5 

= 

98765 

123456 X 8 

+ 

6 

= 

987654 

1234567 X 8 

+ 

7 

= 

9876543 

12345678 x 8 

+ 

8 

= 

98765432 

123456789 x 8 

+ 

9 

= 

987654321 


A problem in congruence modulo n is equivalent to a problem in Z„ with its 
arithmetic as illustrated in Problem 1.5 above. In practice, however, we shall 
abandon much of this formalism. What we shall do is select a complete set 
of residues, (usually the set of least positive residues), and work with these 
numbers, dropping the square brackets. When any sum or product is 
calculated we replace the answer by the chosen residue to which it is 
congruent. Here are a couple of illustrations of the way in which congruence 
is used. 


W 





Example 1.2 

Show that 1^ + 2^ + 3^ + • • • + 60^ is divisible by 5. 

In terms of congruence we are asked to show that 1^ + 2^ + 3^ + • • • + 60^ is 
congruent modulo 5 to 0. Now each of the terms is congruent modulo 5 
to one of 0, 1, 2, 3 or 4, and so one line of attack would be to evaluate the 
least positive residue modulo 5 of each of these cubes and add up. However, 
a considerable short-cut is provided by Theorem 1.1(f), which tells us that if 
two numbers are congruent modulo 5 then their cubes are also congruent 
modulo 5. So, since l = 6 = ll = -- - = 56 (mod 5), we have 

1^ = 6 ^ = 11^ = • • • = 56^ (mod 5). 

Similarly 

23 = 73 = 123 = ... = 573 5). 

3^ = 8 ^ = 13^ = • • • = 58=^ (mod 5); 

4^ = 9^ = 14^ = ■ • ■ = 59^ (mod 5); 

5^ = 10^ = 15^ = • • • = 60^ (mod 5). 

Therefore, 

1^ + 2^ + 3^ + • • ■ + 60^ = 12 X (1^ -I- 2^ -I- 3^ -I- 4^ + 5^) (mod 5). 

Now, 

2^ = 3, 3^ = 27 = 2, 4^ = 64 = 4 and 5^ = 0^ = 0 (mod 5), 
and so 

1^ T 2^ T 3^ + • • • -l- 60^ = 12 X (1-1-3-1-2T4T0) = 120 = 0 (mod 5), 
as claimed. ♦ 

Example 1.3 

Show that there do not exist integers x and y such that = 999. 

At first glance it might be difficult to see what this question has to do with 
congruence. In fact, it is a particular case of a general result concerning the 
possible values that a sum of two squares can take modulo 4. 

Any integer x is congruent modulo 4 to one of the integers 0, 1, 2 or 3. 
Theorem 1.1(f) tells us that x"^ is therefore congruent modulo 4 to one of the 
numbers 0^, 1^, 2^ or 3^. That is, x^ is congruent modulo 4 to either 0 or 1 
(since 2^ = 0 (mod 4) and 3^ = 1 (mod 4)). Similarly, for any integer y, y'^ 
is congruent modulo 4 to either 0 or 1. Theorem 1.1(d) now gives 

+ 2 /^ = 0,1 or 2 (mod 4) 

(as 0 , 1 and 2 are the possible results of adding either 0 or 1 to either 0 or 1 ). 

This argument tells us that any integer which is congruent modulo 4 to 3 
cannot be written as the sum of two squares. Now 999 = 3 (mod 4) is such 
an integer, and so the equation 

x"^ +y^ = 999 

cannot have a solution in integers. ♦ 

And now some for you to try. 

Problem 1.6 _ 

What is the remainder when 1! + 2! + 3! -I- • • • -H 1000! is divided by 7? 

Problem 1.7 _ 

Let a be an integer which is not divisible by either 2 or 3. Prove that — 1 
is divisible by 24. Hint: Show = 1 (mod 24). 


There are simpler ways of solving 
Example 1.2. For instance, you 
may be familiar with the formula 



in which case, putting n = 60, the 
result drops out. Our solution here 
intentionally illustrates the use of 
the properties of congruence. 
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1.3 Further properties 

There is a property of congruence which, although it is no more than a 
re-expression of an established divisibility property, will be used so often 
that it merits the status of a theorem. 


Theorem 1.3 

If a = 6 (mod m) and a = b (mod n), then 
a = b (mod lcm(m, n)). 


Proof of Theorem 1.3 

From the definition of congruence there exist integers r and s such that 
a — b = rm and a — b—sn. 

Let d = gcd(m, n), so that 

m = dm' and n = dn', where gcd(m', n') = 1 . 

Substituting for m and n in the equation rm = sn gives 
rdm' = sdn'; that is rm' = sn'. 

We infer from this that n' divides rm', whereupon Euclid’s Lemma gives us 
that n' divides r. So putting r = kn' we have 

a — b = rm = kmn' = km = k ^ lcm(m, n). 

That is, a = 6 (mod lcm(m,n)), aa claimed. ■ 


Theorem 4.5 of Unit 1 establishes 
that gcd(m',n') = 1. 


See Theorem 4.8 of Unit 1. 


One particular case of Theorem 1.3 is well worth highlighting. We shall 
frequently want to apply this result when m and n are relatively prime, in 
which case lcm(m, n) = mn. 


Corollary to Theorem 1.3 

If a = 6 (mod m) and a = b (mod n), where gcd(m, n) = 1, then 
a = b (mod mn). 

Notice how much simpler Problem 1.7 would have been with the benefit of 
Theorem 1.3. To show that = 1 (mod 24) it is sufficient to show that 
= 1 (mod 8 ) and = 1 (mod 3). Both these separate parts are quickly 
confirmed from congruence ideas: 

(1) a odd implies a = 1,3,5 or 7 (mod 8 ), and squaring, 

= 1 (mod 8 ) in all cases; 

(2) a not divisible by 3 implies a = 1 or 2 (mod 3), and squaring, 

= 1 (mod 3) in each case. 

We have seen that if a = 6 (mod n) then ca = cb (mod n), for any integer c. 
What about the converse of this result? If ca = cb (mod n) can we 
legitimately cancel the c’s to recover a = b (mod n)? In fact we cannot, as 
this simple counter-example shows; 

2 = 8 (mod 6 ) but 1^4 (mod 6 ). 

Here, cancellation of the common divisor 2 has produced a contradiction. 
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Common divisors on two sides of a congruence can always be cancelled, but 
in doing so the modulus has to be adjusted according to the following rule. 


Theorem 1.4 Cancellation rule 

If ca = cb (mod n) then a = b ^mod where d = gcd(c, n). 


Proof of Theorem 1.4 

From ca = cb (mod n) we know that there exists an integer k such that 
ca — cb = kn. Now gcd(c, n) = d, and so there exist relatively prime integers 
r and s such that c = dr and n = ds. Therefore, substituting for c and n in 
the equation ca — cb = kn gives 

dr a — drb = kds, 

which, after cancelling the common d, gives 
r{a — b) = ks. 

From this s divides r{a — b) and, as gcd(r, s) = 1, Euclid’s Lemma confirms 

Tl 

that s divides a — b. Consequently a = b (mod s), where s = —. ■ 

d 

One special case of Theorem 1.4 is worth noting. When gcd(c, n) = 1 the 
common divisor c can be cancelled without the need to adjust the modulus 
and is stated formally as follows. 


Corollary to the cancellation rule 

If CO = cb (mod n), where gcd(c, n) = 1, then a = b (mod n). 


In fact the two congruences in Theorem 1.4 are ‘equivalent’ because the 
reverse implication also holds. That is, 

if a = b ^mod —^ then ca = cb (mod n ), where d = gcd(c, n). 


To justify this remark, suppose that a = b 
integer k such that 

a-b^k^. 

d 


fmod 5 
\ d 


)■ 


Then there is an 


Multiplying by c: 


ca — cb 


kc 


-n. 


so that ca = cb (mod n), since - is an integer. 

d 

We shall make use of the symbol to indicate that two congruences are 
equivalent. For example, after cancellation of the common divisor 6 in the 
following, 

12a; = 18 (mod 27) 2x = 3 (mod 9). 


Problem 1.8 _ 

Use an appropriate cancellation to simplify each of the following 
congruences: 

(a) 6a: = 18 (mod 30); 

(b) 20a; = 30 (mod 45); 

(c) 52a; = 39 (mod 60). 


Theorem 4.5 of Unit 1 established 
that r and s are relatively prime. 
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Before we leave this area of congruence properties there is one final result 
which merits our attention. Euclid’s Lemma for the case of a prime divisor p 
showed that if p divides ab, then either p divides a or p divides 6. When this 
is expressed in congruence notation we have the result which follows. We 
shall have numerous occasions to refer to this result so, to ease identification 
of the reference, we shall continue to call it Euclid’s Lemma for prime 
divisors. 


Theorem 1.5 Euclid's Lemma for prime divisors 

If = 0 (mod p) then a = 0 (mod p) or b = 0 (mod p). 

In problem 1.8 we have made a start at solving congruence problems. We 
shall return to this in Section 3; but first we take a short detour. 


2 DIVISIBILITY TESTS 


Given any integer written in our familiar decimal representation, we can tell 
at a glance whether or not it is divisible by 2 or 5. To test divisibility by 5, 
for example, we simply look to see whether or not the units digit is 0 or 5. 
Though not quite so immediate, there are also fairly simple tests for 
divisibility by 3, 4, 8, 9 and 11. All these divisibility tests can be derived 
from congruence ideas. 

Historically, the most significant divisibility test is that for division by 9. 

A positive integer is divisible by 9 if, and only if, the sum of its digits is 
divisible by 9. 

In fact this is a special case of a stronger result which we shall prove shortly. 

A positive integer is congruent modulo 9 to the sum of its digits. 

For example, if Al = 974064 then 

7V = 9 + 7 + 4 + 0 + 6 + 4 = 30 = 3 (mod 9). 

This fact led to a method of checking calculations, known as ‘casting out 
nines’ which, over the years, has been much used by book-keepers. The 
method amounts to reworking the calculations in the residue class 
arithmetic Zg. As an illustration, consider the multiplication shown in 
Figure 2.1. On the left the multiplication is carried out fully, whilst on the 
right the same calculation is carried out modulo 9. 


1489 l-f4-|-8-|-9 = 22 = 4 (mod 9) 

X 753 7-f5-l-3 = 15 = 6 (mod 9) 

1042300 4x6 = 24 = 6 (mod 9) 

7 4 4 5 0 
4 4 6 7 

112 12 17 Check: l-M-|-2-t-l-l-2-t-l-|-7=15 = 6 (mod 9) 


Figure 2.1 Casting out nines 

The fact that the two answers agree modulo 9 is far from being conclusive 
proof that the calculation is correct. However, there is a good chance that a 
mistake in carrying out the calculation would have shown up during this 
check. 
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We shall prove the results giving divisibility tests for 9 and 11 together in 
the following theorem. 


Theorem 2.1 Divisibility by 9 and 11 

Let the integer N be written in decimal notation as 
N = amdm-i ■ ■ ■ a 2 aiao so that the digits satisfy 0 < Uj < 9 with 
am ^ 0. Then; 

(a) N = ao + ai + a 2 + as-\ -h Om (mod 9); 

(b) N = ao - ai + as - as -\ -h {-l)"'am (mod 11). 


The well-known test for division 
by 3: A positive integer is divisible 
by 3 if, and only if, the sum of its 
digits is divisible by 3, follows 
immediately from part (a). 


Proof of Theorem 2.1 

The key is to write out the number N in terms of powers of 10, namely 
N ~ Uq “f lOui -|-10^02 T 10^03 -f- * * • T IQ^Om. 

(a) Since 10 = 1 (mod 9), it follows from Theorem 1.1(f) that 

10'’ = 1 (mod 9) for all integers r > 1. Thus, from properties (d) and (e) 
of Theorem 1.1, 

N = ao + lai + las + las H-+ lam (mod 9) 

= 00 - 1 - 01 - 1 - 02 - 1 - 03-1 - 1 - Oto (mod 9). 

(b) Similarly, since 10 = —1 (mod 11), 10'’ = (—1)'’ (mod 11) for all 
integers r and 

N = aQ + (-l)oi -1- (-1)^02 -I-h (-l)'"om (mod 11) 

= 00 - 01 - 1 - 02 - 03-1 -h (-l)'"Om (mod 11 ). ■ 

In the congruences of parts (a) and (b) of Theorem 2.1, and in their proofs, 
we have unnecessarily used the digits of N in reverse order, starting at the 
units digit oq. It will be helpful to use formula (b) in this way, starting at 
the positive units digit and then alternating the signs. But in using (a) we 
shall often, as we did in Figure 2.1 above, add the digits in their naturally 
occurring order. 


Diversion 

987654321 x 9 
987654321 x 18 
987654321 x 27 
987654321 x 36 
987654321 x 45 
987654321 x 54 
987654321 x 63 
987654321 x 72 
987654321 x 81 


8888888889 

17777777778 

26666666667 

35555555556 

44444444445 

53333333334 

62222222223 

71111111112 

80000000001 


Problem 2.1 _ 

Let N = 9723 and M = 18 056. 

(a) Determine the remainders when each of the numbers N, M, N + M and 
N — M are divided by (i) 9 and (ii) 11. 

(b) Determine the missing digit (?) in the product 

N X M = 9723 X 18056 = 175(7)58488 
without using a calculator. 
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Problem 2.2 _ 

An integer N has an even number of digits. A second integer M is formed 
by moving the last digit of N to the front. (For example, N = 588471 
the 1 is moved to the front giving M = 158847.) Show that 9 divides 
N — M, 11 divides N + M and 99 divides N'^ — M^. 


There are numerous variations on a trick which capitalizes on the connection 
between a number and the sum of its digits. Ask a person to give any 3-digit 
number (which is not palindromic). Without knowing what the number is, a 
prediction is made that application of the following sequence of operations 
on the number will produce the answer 1089. 


Write down the number and the number formed by reversing the order of its 
digits. Then subtract the smaller of these numbers from the larger. Finally 
add to this the number formed by reversing its digits. 

For example, if the chosen number is 638 then this is subtracted from 836 
giving 198. Adding 198 to 891 gives 1089. The work of this section should 
enable you to explain why this is so. 


It may happen that the first 
subtraction produces a 2-digit 
number. This is treated as a 3-digit 
number with leading 0 for the 
purposes of reversing its digits. For 
example, 99 would reverse to 990. 


3 LINEAR CONGRUENCES 


3.1 Polynomial congruences 

Having studied basic properties of congruence, the next step is to look at the 

problem of solving congruences involving unknowns, such as 

3x = 7 (mod 12) or = 0 (mod 8). The first of these examples 

happens to have no solutions, for there is no integer x for which 

3a: = 7 (mod 12). On the other hand every integer x satisfies 

x^ — x^ = Q (mod 8) — try one! 

By an integral polynomial we mean a polynomial 

p{x) = CmX^ + -I -h CiX + Cq 

in which the coefficients cq, ci,..., Cm and the variable x are integers. If 
P{x) is an integral polynomial then the congruence P{x) = 0 (mod n) is a 
polynomial congruence. Our present interest is in solving polynomial 
congruences and we shall show straightaway that if an integer a is a solution 
of the congruence, that is, P{a) = 0 (mod n), then so too is every integer in 
the residue class modulo n of a. 


Theorem 3.1 

Let P{x) be an integral polynomial. If a = 6 (mod n) then 

P{a) = P{b) (mod n). In particular, a is a solution of the polynomial 

congruence P{x) = 0 (mod n) if, and only if, 6 is a solution. 
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Proof of Theorem 3.1 

Let P{x) = CmX^ + H-h cix + cq. Since a = h (mod n), 

properties (e) and (f) of Theorem 1.1 tell us that Cro’’ s Crlf (mod n), for 
each integer r > 1. Property (d) of Theorem 1.1 then gives 

P{a) = CmoP^ + H-hcia + co 

= + CTn-ib"^~^ H-h Ci 6 + Co = P{b) (mod n). 

In particular, P{a) = 0 (mod n) if, and only if, P{b) = 0 (mod n). That is, a 
is a solution of the congruence P{x) = 0 (mod n) if, and only if, 6 is a 
solution. ■ 

As a consequence of Theorem 3.1, it is apparent that the problem of solving 
the congruence P{x) = 0 (mod n) is really a problem in the residue class 
arithmetic Z„; if an integer is a solution then so too is every integer in its 
residue class. So the t 2 isk is to find which residue classes solve the 
congruence. Two congruent integers which satisfy a polynomial congruence 
will be thought of as being the same solution. 


Definition 3.1 Number of solutions of a polynomial congruence. 

Let S = {bi,b 2 ,... ,bn} be a complete set of residues modulo n. The 
number of solutions of the congruence P{x) = 0 (mod n) is the number 
of integers 6 S 5 for which P{b) = 0 (mod n). 


Here is an example. 

Example 3.1 

Solve the polynomial congruence x^ — x = 0 (mod 6 ). 

There are six residue classes modulo 6 and each may be a solution of the 
congruence. We choose the least positive residues, 0, 1, 2, 3, 4 and 5 and 
test each one in turn. 

0 ^ - 0 s 0 (mod 6 ) 

- 1 = 0 (mod 6 ) 

2 ^ — 2 = 2 (mod 6 ) 

3^ — 3 = 0 (mod 6 ) 

4^ - 4 = 0 (mod 6 ) 

5^ — 5 = 2 (mod 6 ) 

We see that 0, 1, 3 and 4 are solutions of the congruence and therefore so 
too is any integer congruent modulo 6 to one of 0, 1, 3 or 4. On the other 
hand any integer which is congruent modnlo 6 to either 2 or 5 does not 
satisfy the congruence. The congruence has four solutions: 

X = 0,1,3,4 (mod 6 ). ♦ 

Problem 3.1 _ 

Solve the following polynomial congruences. 

(a) Pi(x) = + 3x + 4 = 0 (mod 7) 

(b) P 2 {x) = — 1 = 0 (mod 5) 
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3.2 Linear congruences 

We have quickly found an algorithmic method for solving polynomial 
congruences, namely, substitute for x, in turn, each value from any complete 
set of residues and record the resulting zeros. This is all well and good when 
the modulus in question is reasonably small and the degree of the 
polynomial is not too large. For more awkward polynomials the amount of 
computation involved in this sledgehammer attack quickly renders it 
impractical, and we must look around for something more subtle. In Unit 4 
we shall return to the problem of solving general polynomial congruences. 
There we shall discover ways of simplifying polynomial congruences and we 
shall be able to predict how many solutions a polynomial congruence will 
have. In Unit 6 we shall be very much concerned with quadratic 
congruences and their solutions. For the remainder of this unit we shall 
confine our attention to the linear congruence 

ax (mod n). 

This, the simplest of all polynomial congruences, crops up naturally in a 
variety of situations in number theory. 

Suppose that xq is an integer such that axo = b (mod n). This means that 
n divides axo — b or, put another way, there exists an integer yo such that 

axo - b = nyo- 

Rearranging, this equation tells us that x = Xq, j/ = yo is a solution of the 
linear Diophantine equation ax — ny = b. On the other hand if x = xq, 
y = yo is any solution oi ax — ny = b then it is certainly the case that 
axo = b (mod n). Thus the problem of finding all integers satisfying the 
linear congruence ax = b (mod n) is precisely the same problem as finding 
all x-values in solutions of the linear Diophantine equation ax — ny — b. As 
we have already solved the latter problem in Theorem 5.1 of Unit 1, our 
principal result on linear congruences is little more than a re-expression of 
that earlier theorem. 


Theorem 3.2 Solution of linear congruences 
Consider the linear congruence ax = b (mod n). 

(a) The congruence has solutions if, and only if, gcd(a, n) divides b. 

(b) If gcd(a, n) = 1, the congruence has a unique solution. 

(c) If gcd(a, n) = d and d divides b, then the congruence has d 

Tl 

solutions which are given by the unique solution modulo — of the 

d 

congruence 



Proof of Theorem 3.2 

(a) The linear Diophantine equation ax — ny = b has solutions if and only if 
gcd(a, n) divides b. From the remarks preceding the theorem, it follows 
that the congruence ax = b (mod n) has solutions if, and only if, 
gcd(a, n) divides b. 

(b) Suppose that gcd(a,n) = 1. Theorem 5.1 of Unit 1 tells us that if 

X = xo, y = yo is one solution of ax — ny = b, then the general solution 
is 

X = xo -f nk, y = yo -I- ak, k Gl.. 

But for all integers k 

Xo + nk = Xo (mod n) 

and so X s Xo (mod n) is the only solution of ax = 6 (mod n). 


This method of solving a problem 
by checking every possible 
candidate is called solution by 
exhaustion. 
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(c) If gcd(a, n) = d and d divides b then 

b 


ax = b (mod n) -x = - fmod . 

d d \ d/ 

But gcd = 1) so the right-hand congruence has a unique 

solution modulo —, say 

X = Xi ^mod ^ j . 


Hence the integers x which satisfy ax = b (mod n) are precisely those of 

Tl 

the form x = xi + k—, for some integer k. 
d 

Consider the set of d integers 

f n n / , 

|a;i, 2 : 1 - 1 --, xi+2-,...,xi + {d-l)-j. 

Certainly no two of these integers are congruent modulo n because they 
are distinct and no two differ by as much as n. We claim further that, 

Tl 

for any integer k, xi + k— is congruent modulo n to one of them. To see 
d 

why that is so, write k = dq + r, where 0 < r < d, as given by the 

Division Algorithm. Then 

, n / , N 21 n 

xi + k- = xi + [dq + rj- — xi +nq + r- 
d d d 

= xi +r^ (mod n). 


So these are the d solutions of ax = b (mod n 


To illustrate part (c) and its proof, consider the congruence 
12a; = 15 (mod 21). 

Since gcd(12,21) = 3, and 3 divides 15, the congruence has three solutions 
modulo 21 . 

Cancellation of the common 3 reduces the congruence to 
4a; = 5 (mod 7) 

which has a unique solution modulo 7, since gcd(4,7) = 1. That solution is 
a: = 3 (mod 7) 

as can be seen from 4x3 = 5 (mod 7). The argument in the proof of 
part (c) then supplies the three solutions to modulus 21 as 

a; = 3 (mod 21), a; = 3 -t- 7 = 10 (mod 21) and x = 3-|-2x7=17 (mod 21). 


Problem 3.2 _ 

How many solutions does each of the following linear congruences have? 

(a) 5a: = 13 (mod 10) 

(b) 5x = 10 (mod 13) 

(c) 10a; = 5 (mod 30) 

(d) 27x = 318 (mod 24) 


Diversion 


Some squares containing the nine non-zero digits. There are 83 such squares in all. 


11826^ = 139854276 
12543^ = 157326849 
24237^ = 587432169 
24441^ = 597362481 


25572^ = 653927184 
15963^ = 254817369 
29034^ = 842973156 
30384^ = 923187456 




3.3 Solving linear congruences 

It is nice to have a theoretical result telling us that solutions exist but it is 
more important to be able to find those solutions. 

Example 3.2 

Solve the linear congruence 30a; = 15 (mod 33). 

As gcd(30,33) = 3 and 3 divides 15 Theorem 3.2 guarantees that the 
congruence has three solutions modulo 33. Failing all else we know that we 
could find these solutions by substituting for x each of the values 
0,1,2,3,... ,32 and recording which are solutions. But this last resort can 
usually be avoided, and can here, as we shall illustrate. 

For a start we can use the cancellation laws to reduce the modulus. By the 
cancellation rule. Theorem 1.4, the common divisor 3 in both coefficients 
and modulus can be cancelled to give the equivalent congruence 

10a; s 5 (mod 11). 

As gcd(10,11) = 1 we know, by Theorem 3.2(b), that this congruence has a 
unique solution modulo 11. 

Next we can cancel further. By the cancellation rule the common divisor 5 
in the coefficients can be cancelled, this time the modulus remaining 
unchanged; 

2a; = 1 (mod 11). 

There are a number of ways of determining the unique solution modulo 11 
from here. For example, we could replace the number 1 on the right-hand 
side of the congrnence by 12, since 1 = 12 (mod 11): 

2a; = 12 (mod 11). 

Finally cancellation of the common divisor 2 of the coefficients yields the 
solution: 

a; = 6 (mod 11). 

Alternatively we could have multiplied through the congruence 
2a: = 1 (mod 11) by 6, obtaining 

12a; = 6 (mod 11), 

whereupon replacement of the coefficient 12 by the congruent nnmber 1 
yields the same solution 

a; = 6 (mod 11). 

We noted that the original congruence had three solutions modulo 33 and 
we have ended with a unique solution modulo 11. There is no contradiction 
here, for in the set of least positive residues modulo 33 there are three 
numbers, namely 6, 17 and 28, which are congruent to 6 modulo 11. 
Consequently the unique solution x = 6 (mod 11) is equivalent to the three 
solutions 

X = 6,17,28 (mod 33), 

for both determine the same set of integers, namely, 

{..., -38, -27, -16, -5,6,17,28,39,50,...}. 

So either form can be taken as the answer here. Normally, except when the 
context of the problem demands otherwise, we shall always give the 
solution(s) in terms of the original modulus. ♦ 


The congruences are ‘equivalent’ in 
the sense that an integer x is a 
solution of one congruence if, and 
only if, it is a solution of the other. 
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Linear congruences, like the one we have just tackled, can all be solved using 
the following strategy. 




Strategy: to solve the linear congruence ax = b {mod n) 

1 Check that gcd(a, n) divides b. If it does not the congruence has 
no solutions. If it does: 

2 Cancel any common divisors of all three of a, h and n. The 
resulting congruence has a unique solution modulo the new 
modulus. 

The resulting coefficients (originally a and b) can then be changed 
by applying the remaining steps in any order, any number of times, 
with the goal of reaching a congruence in which the coefficient 
of X is 1. 

3 Cancel any common divisor of the coefficients. 

4 Replace either coefficient by any congruent number. 

5 Multiply through the congruence by any number which is 
relatively prime to the modulus. 


Step 5 needs a little clarification. To illustrate why the multiplier has to be 
relatively prime to the modulus, consider the congruence 

lx=\ (mod 40). 

If we multiply through by 6 we get 
42a; = 6 (mod 40), 

and replacing 42 by the congruent number 2 
2a; = 6 (mod 40). 

Plainly a; = 3 (mod 40) is a solution of this congruence because 
2 X 3 s 6 (mod 40), but it is not a solution of the original congruence 
because 7x3 = 21^1 (mod 40). So somewhere along the line an 
extraneous solution has been introduced. 

The problem arose when we multiplied through the congruence by 6 , 
because gcd(6,40) > 1. Prom ax = b (mod n) it is certainly true that 
cax = cb (mod n). But, according to Theorem 1.4, the cancellation rule, we 
can only reverse the argument and draw the conclusion ax = b (mod n) from 
cax = cb (mod n) when gcd(c, n) = 1. A solution of cax = cb (mod n) is not 
necessarily a solution of aa; = 6 (mod n) unless gcd(c, n) = 1. Hence the 
relatively prime condition of Step 5 must hold before we multiply through a 
congruence. 

The way to become proficient at solving linear congruences is through plenty 
of practice at applying the above strategy. We shall do one more example 
before inviting you to try your hand. 

Example 3.3 

Solve 9x = 15 (mod 26). 

As gcd(9,26) = 1, Step 1 tells us that 9x = 15 (mod 26) has a unique 

by Step 3, 

by Step 5, multiplying by 9, 
by Step 4, 

by Step 4. ♦ 


solution modulo 26, and Step 2 is not applicable. 
9a; = 15 (mod 26) 3a; s 5 (mod 26), 

27x = 45 (mod 26), 
a; = 45 (mod 26), 

X = 19 (mod 26), 
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The steps that we followed in this example are certainly not unique. There 
are many ways of solving the congruence, but, of course, all must lead to the 
same conclusion. 


Problem 3.3 _ 

Solve the following linear congruences. 

(a) 28a; = 49 (mod 53) 

(b) 34a; = 19 (mod 52) 

(c) 137a; = 96 (mod 19) 

(d) 51a; = 8 (mod 53) 

(e) 18a; = 39 (mod 69) 


4 SIMULTANEOUS LINEAR 
CONGRUENCES 

4.1 The Chinese Remainder Theorem 

In the first century AD the Chinese mathematician Sun-Tsu posed the 
following problem. 

Example 4.1 

Find a number which leaves remainders 2, 3 and 2 when divided by 3, 5 and 
7 respectively. 

In congruence notation the problem is asking for a simultaneous solution of 
the system 

X = 2 (mod 3); x = 3 (mod 5); x = 2 (mod 7). 

We can solve this problem as follows. To satisfy the first congruence x must 
be of the form 3r + 2. To satisfy the second congruence as well requires 

3r + 2 = 3 (mod 5), i.e. 3r = 1 (mod 5). 

This has the unique solution r = 2 (mod 5), i.e. r = 5s + 2 for some integer 
s. Therefore 

X = 37" “1“ 2 = 3(5s T 2) T 2 = 15s T 8. 

This number has to satisfy the third and final congruence. 

15s + 8 = 2 (mod 7) -++> Is + 1 = 2 (mod 7) 

This has the unique solution s = 1 (mod 7). So s = 7t + 1 for some integer t 
and, substituting in the expression for x, 

X = 15(7t + 1) + 8 = 105t + 23. 

Any integer x of this form satisfies all three congruences. The least positive 
solution is 23 (corresponding to t = 0) and the complete solution is 
X = 23 (mod 105). ♦ 

Consider now a general system of simultaneous linear congruences to be 
solved simultaneously, that is, a system 

oix = 6 i (mod ni); a 2 X = 62 (mod 712 ); •. • ; UrX = br (mod Ur) ■ 


By ‘simultaneous solution’ we 
mean an x which satisfies all the 
congruences. 


22 



For an integer a; to be a simultaneous solution of the system it must be a 
solution of each of the r individual congruences, and consequently a 
necessary condition for a solution is that 

gcd(ai, Tij) divides bi, for each i = 1 , 2 ,... ,r. 

Assuming that this condition holds, a first step in solving the simultaneous 
system is to solve each individual congruence, finding its unique solution to 
the appropriate modulus. Prom then on we can confine attention to solving 
simultaneous systems of the form 

a; = 6 i (mod ni); a; = 62 (mod 712 ); x = (mod n^) 

as in Sun Tsu’s problem. 

The fact that each congruence is solvable is not sufficient on its own for the 
simultaneous system to have a solution. For example, consider the following 
system. 

X = 1 (mod 2); x = 2 (mod 4) 

No even integer satisfies the first congruence and no odd integer satisfies the 
second; hence the simultaneous system has no solutions. Inconsistencies, 
such as the one illustrated here, can arise when two linear congruences have 
moduli which are not relatively prime. However, if we restrict ourselves to 
systems in which every pair of moduli are relatively prime, it turns out that 
simultaneous solutions always exist. In honour of their early contributions in 
this area, this result is known as the Chinese Remainder Theorem. 


Theorem 4.1 Chinese Remainder Theorem 

Let ni,n 2 ,..., Ur be positive integers such that gcd{ni,nj) = 1 for 
i ^ j. Then the system of linear congruences 

x = 6 i(modni); x = 62 (mod 722 ); ...; x = 6 ^ (mod ti^) 

has a simultaneous solution which is unique modulo 77 i 7 i 2 ... Tir. 


Proof of Theorem 4.1 

We shall prove the theorem by first constructing a solution and then 
showing that it is unique modulo 7ii7i2 ... Tir. 

N 

Let N = nin 2 ■■■ nr and Nk = —, for A: = 1, 2, ..., r. Then, since 

gcd(nj, Uk) = I for each i ^ k, it follows that 

gcd(A^fc,7lfc) =gcd(7li 712... Tlfc-iTlfc+j... 71^,71*;) = 1, 

and so the linear congruence TV^x = 1 (mod Uk) has a unique solution 
modulo nk- Let this solution be Xfc, so NkXk = 1 (mod n*,). 

We shall show that the integer 

Xo = biNiXi + 62AI2X2 H-h brNrXr 

satisfies each of the congruences. To achieve this we evaluate xq modulo nk, 
for each k = 1,2,3,... ,r. 

We start by noting that, whenever i k, since nk divides Ni, we have 
Ni = 0 (mod nk). Consequently 

Xo = bkNkXk (mod nk), for each fc = 1, 2, ..., r, 

as each of the remaining terms in the sum is congruent modulo nk to 0. 

Finally, since Xfc was found such that NkXk = 1 (mod nk), we have 

Xo = bk (mod nk) 

as claimed. 


The moduli Tii, 712, ..., Tir are said 
to be pairwise relatively prime. 
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It remains to show that the discovered solution is unique modulo the 
product riin^ ■ ■ - rir. To this end suppose that x' is a second simultaneous 
solution of the system, that is, 

xq = x' = bk (mod Uk) , for each fc = 1 , 2 , ..., r. 

This implies that each Uk divides x' — xq, whereupon the fact that the 
moduli are pairwise relatively prime gives us that 

ni 712 ... Ur divides x' — xo- 


This amounts to 


x' = Xo (mod 711772 . . . 77r) 
exactly as required. 


To illustrate the proof of the Chinese Remainder Theorem we trace its steps 
in an example. 

Example 4.2 

Solve the system of simultaneous linear congruences 

X = 5 (mod 6 ); x = 4 (mod 11); x = 3 (mod 17). 

The given values of the variables in the proof are: 

coefficients: bi =5, 62 = 4, 63 = 3; 

moduli: rii = 6, 772 = 11, — 17. 

The calculated values are: 

AT = 6 X 11 X 17 = 1122; ATj = 11 x 17 = 187; 
iV 2 6 X 17 = 102; = 6 x 11 = 66 . 


The values Xi are obtained by solving the linear 
congruences NiX = 1 (mod 77,). 


A^ix = 1 (mod 77i) 
N 2 X = 1 (mod 772 ) 


N 3 X = 1 (mod 773 ) 




187x = 1 (mod 6 ) 

X = 1 (mod 6 ); so xi = 1. 
102 x = 1 (mod 11 ) 

3x = 1 (mod 11) 

X = 4 (mod 11); so X 2 = 4. 
66 x s 1 (mod 17) 

—2x = —16 (mod 17) 

X = 8 (mod 17); so X3 = 8 . 


Therefore 

Xo = 5 X 187 X 1 + 4 X 102 X 4 + 3 X 66 X 8 = 4151 

= 785 (mod 1122). ♦ 


Problem 4.1 --- 

Find the least positive integer n such that 3^ divides 2n + 3, 4^ divides 
377 + 4 and 5^ divides 477 + 5. 


4.2 Solving simultaneous congruences 

One situation in which systems of simultaneous linear congruences can be 
introduced is when confronted with a problem of solving a single linear 
congruence where the modulus is large and composite. To see how this 
works let n have prime decomposition .. .Pr'' and compare the linear 

congruence 

ax = b (mod n) 
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and the system 

ax = b ^mod ; ax = b ^mod j ; ... ; ax = b (mod p^*") . 

Certainly any integer x which satisfies ax = b (mod n) also satisfies each 
congruence in the system because divides n for each i. On the other 
hand, since the p, are pairwise relatively prime, repeated use of the corollary 
of Theorem 1.3 tells us that any solution of the simultaneous system must 
satisfy ax = b (mod n). So the two are equivalent. 

We shall solve a problem of this sort in Example 4.3, which follows. However, 
in this example we shall abandon the formal approach of Example 4.2 and 
Problem 4.1 in which we traced the explicit construction of a solution as 
given in the proof of the Chinese Remainder Theorem. The method we shall 
adopt here, like our solution of Sun-Tsu’s problem at the beginning of the 
section, will not require the same amount of careful arithmetic. Indeed, we 
often treat the Chinese Remainder Theorem as an important theoretical 
result which confirms the existence of solutions, but apply other methods, 
like the one we are about to illustrate, to discover what those solutions are. 

Example 4.3 

Solve the linear congruence 3a; = 5 (mod 1001). 

Observing that 1001 = 7 x 11 x 13, we seek the simultaneous solution of 
3x = 5 (mod 7); 3x = 5 (mod 11); 3x = 5 (mod 13). 

That is, (having first solved each of these congruences individually), 

X = 4 (mod 7); x = 9 (mod 11); x = 6 (mod 13). 

The positive integers x which satisfy the congruence x = 6 (mod 13) are 
x = 6,19,32,45,58,71,84,97,.... 

Now 97 is the first of these integers which is congruent modulo 11 to 9, and 
consequently, x = 97 (mod 11 x 13) is the unique solution of the final pair of 
congruences of the system. The positive integers in this solution set are 

X = 97,240,383,526,669,.... 

Now 669 is the first of these which is also congruent modulo 7 to 4, and 
hence is the smallest positive integer satisfying all three congruences. Hence 

X = 669 (mod 7 x 11 x 13) 

is the unique solution of the congruence. 



We use the symbol => as a 
shorthand for the word ‘implies’. 


Figure 4-1 Solving simultaneous linear congruences 


♦ 


25 




Problem 4.2 - 

Solve the linear congruence 7x = 9 (mod 165). 


There remains one loose end to tidy up. We have seen that when a system 
of linear congruences has moduli which are not pairwise relatively prime the 
system may be inconsistent and have no solutions. But this is not 
necessarily the case. For instance, the system 

x = 2 (mod 6 ); x = 5 (mod 9) 

involves moduli which are not pairwise relatively prime. However, a; = 14 
certainly satisfies both congruences, so solutions do exist. 

Theorem 4.2 

The system of linear congruences 

X = bi (mod ni); a; = 62 (mod 712 ) 

has a simultaneous solution if, and only if, gcd(ni,n 2 ) divides 62 — ^ 1 - 
If a solution exists then it is unique modulo lcm(ni,n 2 ). 


Proof of Theorem 4.2 

Suppose that the integer x satisfies both 

a; = 61 (mod ni) and a; = 62 (mod 712 ). 

That is, there exist integers r and s such that 
X — bi = n\r and a; — 62 = 0 , 28 . 

Eliminating x from this pair of equations leads to 

b2-bi = Tlir - 7128. 

Now the right-hand side is an integer combination of ni and 712 and, as such, 
is a multiple of gcd(ni,n 2 ). Thus gcd(ni,n 2 ) divides 62 — and so this is a 
necessary condition for the system to have a solution. 

To confirm that the condition is sufficient to guarantee a solution, we reverse 
the argument. Suppose that 

b2 — bi = fcgcd(ni,n 2 ), for some integer k. 

Now we know that there exist integers u and v such that 

gcd(ni, 712) = UTli -I- V7l2. 

Elimination of gcd( 7 ii, 772 ) from this pair of equations produces 
bi -|- kuTii = 62 — kv7i2. 

Then 

61 -I- kurii = 5 i -t- (fcu)ni = bi (mod tii) 

and 

bi + kuTii = 62 - {kv)7i2 = 62 (mod 712 ) ■ 

So bi -I- kuTii satisfies both congruences and confirms that simultaneous 
solutions do exist. 

Finally, there is the question of uniqueness. Suppose that Xi and X 2 are two 
solutions. That is 

xi = X 2 = bi (mod Til) and xi = X 2 = ^2 (mod 712 ) ■ 

Theorem 1.3 now completes the task: 

xi = X 2 (mod lcm( 7 ii, 7 i 2 )). ■ 
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The result of Theorem 4.2 can be generalized to cover any number of 
congruences. A proof using mathematical induction is readily available but 
is omitted here as the details are somewhat tedious. 


Corollary 

The system of linear congruences 

X = h\ (mod Til ); X = b 2 (mod 0 , 2 ); ... ; x = br (mod Ur) 

has a simultaneous solution if, and only if, gcd(n,,nj) divides bj - bi 
for each pair i, j of suffixes. If a solution exists it is unique modulo 
lcm(ni, n 2 ,... ,nr). 


Problem 4.3 _ 

For each of the following systems of simultaneous linear congruences decide 
whether or not it has solutions and if so solve the system. 

(a) x = 7 (mod 12); x= 11 (mod 18); a; = 1 (mod 23) 

(b) x = 4 (mod 12); x = 10 (mod 18); x = 3 (mod 7) 


Throughout the remainder of the course we shall continually be meeting 
congruence problems. It may be surprising how often the task of solving 
linear congruences crops up in the context of deeper problems. 


ADDITIONAL EXERCISES 

Section 1 

1 Determine the least positive residue and the least absolute residue of 
1997 

(a) modulo 7; 

(b) modulo 17; 

(c) modulo 101. 

2 Given that fc = 1 (mod 12), what is the least positive residue of 6fc + 5 

(a) modulo 4; 

(b) modulo 9; 

(c) modulo 12? 

3 (a) Give an example to show that a'' = b'^ (mod n) need not imply that 

a = b (mod n). 

(b) Give an example to show that a'' = b'^ (mod n) and k=j (mod n) 
both being true does not necessarily imply that a? = V (mod n) is 
true. 

4 Prove by induction that 6” = 5n + 1 (mod 25), for all integers n > 1. 

5 Prove that if n > 2 and gcd(a, n) = 1 then the set of integers 

{c, c + a, c + 2a, c + 3a,..., c + (n — l)a} 
is a complete set of residues modulo n for any integer c. 
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What is the remainder when 11^^ is divided by 

(a) 7; 

(b) 17; 

(c) 19. 

7 Use ideas of congruence to prove that 

(a) 29 divides 2^® — 1; 

(b) 79 divides 3®^ + 1. 

8 In 1659 Fermat asserted that no prime number of the form 3fc — 1 can 
be written in the form + 36^. Use congruence modulo 3 to show that 
he was correct. 

9 From the definition of congruence alone, prove the following. 

If ar = 6 (mod n) and cr = d (mod n), for some integer r, then 
ad = be (mod n). 


Section 2 

1 Without carrying out the multiplication find the missing digit (?) in 
each of the following products. 

(a) 108 X 371 =400(?)8 

(b) 1578 X 34 971 = 5518(?) 238 

(c) 4473 X 3(?)9 = 1426 887 Hint: 11 divides 1426887. 

2 A and B are two different 7-digit numbers each involving all seven of 
the digits 1, 2, 3, 4, 5, 6 and 7. Prove that A does not divide B. 

3 Let N > M be two 10-digit numbers formed from the same 10 digits 
but in different orders. If X is the sum of the digits of - M, show 
that the sum of the digits of is 9. 

4 Show that 2" divides an integer N if, and only if, 2" divides the 
number made up of the last n digits of N. 

5 (a) Show that, for all n > 0, 10^" = 1 (mod 99) and 

102 n+i = 10 (mod 99). 

(b) The remainder on dividing a number by 99 can be found in a way 
similar to the corresponding result for division by 9, but treating 
the digits of the number two at a time. The following examples 
illustrate the method: 

6239 = 62 H- 39 = 101 = 2 (mod 99) 

and 

54 787 = 5 -1- 47 + 87 = 139 = 40 (mod 99). 

Use the result in part (a) to show why this test works. 

(c) Find a test for divisibility by 101 and use it to determine the 
remainders when 62 479 and 9850833 are divided by 101. 
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Section 3 


1 Solve the following linear congruences. 

(a) 8a; = 12 (mod 60) 

(b) 21a; = 35 (mod 47) 

(c) 6a; = 5 (mod 41) 

(d) 5a; = 1 (mod 93) 

2 Solve the following polynomial congruences. 

(a) a;^ = 1 (mod 7) 

(b) 2x2 + 4a; + 5 = 0 

3 Use congruences to solve the following linear Diophantine equations. 

(a) 12x+19?/ = 7 

(b) I7x + 4ly = 13 

4 There are 19 x 20 congruences of the form ax = b (mod 20), since there 
are 19 different choices for a ^ 0 (mod 20) and 20 choices for b. For 
how many of these congruences does a solution exist, and for how many 
congruences is the solution unique? 


Section 4 

1 Solve the following system of congruences by following the steps in the 
proof of the Chinese Remainder Theorem. 

X = 1 (mod 4); x = 3 (mod 5); x = 0 (mod 7). 

2 Solve the following systems of congruences by any method. 

(a) 2x = 3 (mod 5); 3x = 4 (mod 7); 4x = 9 (mod 11). 

(b) X = 1 (mod 4); x = 3 (mod 6); x = 3 (mod 9). 

3 Solve the following linear congruence. 

19x = 7 (mod 2310) 

4 Find the smallest positive integer n such that 3^ divides n, 4^ divides 
n + 1 and 5^ divides n + 2. 

5 In the arithmetic progression 

7, 18, 29, 40, 51, ... 

find the first three consecutive terms which are divisible by 2, 3 and 5 
respectively. 

6 For which values of c does the following system of congruences have a 
simultaneous solution? 

5x = c (mod 12); 7x = 2 (mod 30) 

7 A band of seventeen pirates stole a sack of gold coins. Attempting to 
divide the spoils into equal portions they found that four coins were left 
over. A brawl over who should get the extra coins followed and one 
pirate was killed. When the spoils were redistributed amongst the 
survivors, ten coins were left over. Again an argument developed and 
one pirate was killed. But now the spoils divided equally between the 
remaining pirates. What was the least number of coins that could have 
been stolen? 




Challenge Problems 

1 Let A = 4444^'*^^. If B is the sum of the digits of A, C is the sum of 
the digits of B and D is the sum of the digits of C, what is D? 

2 Find a positive integer such that one-half of it is a square, one-third of 
it is a cube and one-fifth of it is a fifth power. 


3 
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Find the final digit of each of the numbers 



(.■•(((7Y)T 


and 7 


where, in both expressions, the integer 7 occurs 1001 times. What are 
the final two digits of each? 


Let N be any integer. How can you construct from the digits of a 
number M of at most 3 digits such that N = M (mod 37). 


SOLUTIONS TO THE PROBLEMS 


Solution 1.1 

(a) False, as 3 - 29 = -26, which is not a multiple of 8. 

(b) True, as 3 - (-29) = 32 = 4 x 8. 

(c) True, as 63 - 37 = 26 = 2 x 13. 

(d) True, as 37 - 63 = -26 = (-2) x 13. 

(e) True, as 63 — 63 = 0 = 0x 37. 

(f) False, as 63 - 13 = 50 = 2 X 25, so 63 = 13 (mod 25). 


Prom the definition of divisors 
(Definition 4.1 of Unit 1) 0 is 
divisible by every positive integer. 


Solution 1.2 

Since a = b (mod n), let k be the integer such that a - b = kn. 

(a) m divides n means that n = mr for some integer r. Therefore 

a — b= kn — k{mr) = {kr)m, 
which confirms that a = b (mod m). 

(b) Multiplying by m: 

ma — mb = mkn = k{mn), confirming ma = mb (mod mn), 

= {mk)n, confirming ma = mb (mod n). 

(c) Dividing by d: 

and are integers. 
d d 

(d) Let gcd(a,n) = di and gcd(5, n) = ^ 2 - Since di divides a, and di divides 
n, it follows that di divides a — fcn; that is di divides b. But then di is a 
common divisor of b and n, and so di < d 2 - 

On the other hand, ^2 divides b, and d^ divides n, giving d 2 divides 
b -I- kn, that is, d^ divides a. So d 2 is a common divisor of a and n, and 
so d 2 < di- Hence the equality di = d 2 follows. 


a b n 
d-d = '‘d' 


which implies that 


a 

d 


5 5 ) ■ 


Note that 


d’ 
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Solutions to the Problems 


(e) {a + c) — {b + c) = a — b = kn, and so a + c = b + c (mod n). 

Note that the result in part (e) is just a special, but important, case of 
Theorem 1.1(d) in which d = c. 

Solution 1.3 

(a) The set of least positive residues modulo 10 is 

{0,1,2,3,4,5,6,7,8,9}. 

The set of least absolute residues modulo 10 is 
{-4,-3,-2,-l,0,l,2,3,4,5}. 

(b) The set of least positive residues modulo 11 is 

{0,1,2,3,4,5,6,7,8,9,10}. 

The set of least absolute residues modulo 11 is 
{-5,-4,-3,-2,-1,0,1,2,3,4,5}. 

Solution 1.4 

(a) Replacing each of the numbers by the least positive residue to which it 
is congruent modulo 11, (for instance -3 = 8,22 s 0, etc), we obt ain 

{6,2, -3,22,23, -7,7,9,43, -8,16} = {6,2,8,0,1,4,7,9,10,3,5}. 

As the latter is the set of least positive residues modulo 11 the former is 
a complete set of residues modulo 11. 

(b) As 10^ = 100 = 1 and 1^ = 1 (mod 11) the eleven numbers do not form 
a complete set of residues. In fact only six residue classes are 
represented in this set, as 9^ = 2^, 8^ = 3^, 7^ = 4^ and 6^ s 5^. 

(c) Starting from 1, each subsequent number is obtained by doubling. To 
avoid calculation of high powers of 2 we can write down the least 
positive residue for each of the numbers by systematically ‘doubling 
modulo IT. The given eleven numbers are congruent modulo 11, in 
order, to the following: 

0,1,2,4,8,16 = 5,10,20 = 9,18 = 7,14 = 3 and 6. 

As these numbers form the set of least positive residues modulo 11, the 
given set is a complete set of residues. 

Solution 1.5 

In Zio: 

[6] + [8] = [6 + 8] = [14] = [4], since 14 = 4 (mod 10). 

[6] X [8] = [6 X 8] = [48] = [8], since 48 = 8 (mod 10). 

Allowing b to take each of the values 0,1,2,..., 8 and 9 in turn we find that 
the corresponding values of [6] x [5] are [0], [6], [2], [8], [4], [0], [6], [2], [8], 
and [4]. So [6] x [5] = [8] has the two solutions [5] = [3] and [6] = [8]. 

Repeating in Zn: 

[6] + [8] = [14] = [3], since 14 = 3 (mod 11). 

[6] X [8] = [48] = [4], since 48 = 4 (mod 11). 

[6] X [5] = [8] has the unique solution [6] = [5]. 


When there is no ambiguity over 
which modulus is involved we shall 
occasionally, as in this solution, use 
the = symbol without its 
accompanying (mod n). 


Each time 11 is exceeded the 
number is replaced by the least 
positive residue and doubling 
begins again. 
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Solutions to the Problems 


Solution 1.6 

We first note that if n > 7 then 7 divides n! and so n! = 0 (mod 7). 

Therefore we have the simplification: _ 

1! + 2! + 3! + • • • + 1000! = 1! + 2! + 3! + ■ • • + 6 ! (mod 7) 

(which removes all fear of the problem!) Now, working modulo 7, l! = 1, 

2! = 2, 3! = 6 , 4! = 24 = 3, 5! = 5 X 4! = 5 X 3 = 1 and 
6 ! = 6 X 5! = 6 X 1 = 6 . And so, 

1! + 2! + 3! + • ■ ■ + 1000! = 1 + 2 + 6 + 3+1 + 6 = 19 = 5 (mod 7), 
and the remainder on dividing by 7 is 5. 

Solution 1.7 

- 1 is divisible by 24 precisely when - 1 s 0 (mod 24) or equivalently, 
adding 1 to both sides and appealing to Theorem 1.1(d), when 

= 1 (mod 24). So our task is to show that any integer, a, which is 
divisible neither by 2 nor by 3 must satisfy = 1 (mod 24). 

The Division Algorithm tells us that a can be written as 

a = 2^q + r, where 0 < r < 23. 

But, written in this way, a is divisible by 2 when r is even, and is divisible 
by 3 when r is divisible by 3. There are just eight values of r which are not 
divisible by either 2 or 3, namely r = 1, 5, 7, 11, 13, 17, 19 and 23. For a to 
be not divisible by either 2 or 3 it must be congruent modulo 24 to one of 
these eight values. Thus we have, replacing each of the last four listed values 
by its least absolute residue, 

a = ±1, ±5, ±7, ±11 (mod 24). 

Now appealing to Theorem 1.1(f), 

= 1,25,49 or 121 (mod 24). 

But each of these numbers has remainder 1 when divided by 24, and the 
result follows. 

Solution 1.8 

(a) We wish to cancel the common divisor 6 . As gcd(6,30) = 6 , we also 
divide the modulus by 6 : 

6 x = 18 (mod 30) a; = 3 (mod 5). 

(b) In order to cancel the common divisor 10, the modulus has to be divided 
by gcd(10,45) = 5. So, 

20a; = 30 (mod 45) 2a; = 3 (mod 9). 

(c) The common divisor 13 can be cancelled without adjustment to the 
modulus, since gcd(13,60) = 1. So 

52a; = 39 (mod 60) <==> 4a; = 3 (mod 60). 

Solution 2.1 

(a) (i) N s 9 + 7 + 2 + 3 = 3 (mod 9); 

Af = l + 8 + 0 + 5 + 6 = 2 (mod 9) 5 
A’ + M = 3 + 2 = 5 (mod 9); 

A-M = 3- 2 = l (mod 9). 

Hence the required remainders are 3, 2, 5 and 1 respectively. 
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Solutions to the Problems 


(ii) A^ = 3-2 + 7-9 =-1 = 10 (mod 11 ); 

M = 6 — 5 + 0 — 8 + l = —6 = 5 (mod 11 ); 

A/' + M = 10 + 5 = 4 (mod 11 ); 

N — M = 10 — 5 = 5 (mod 11 ). 

Hence the required remainders are 10, 5, 4 and 5 respectively. 

(b) NxM = 3x2 = 6 (mod 9), and so the number on the right-hand side 
of the equation has to be congruent modulo 9 to 6 . 

1 + 7 + 5 +(?) + 5 + 8 + 4 + 8 + 8 = 46+ (?) = ! + (?) = 6 (mod 9), 

from which it follows that the missing digit (?) can only be 5 . 

Solution 2.2 

Let N n 2 m—in 2 m —2 • • • 0,20,10,0 so that M = (io® 2 m—i<i 2 m —2 • • ■ 02 ^ 1 . Since 
N and M comprise the same 2m digits, the 9-test gives 

N = M = ao + oi + 02 4-+ a 2 m -2 + a 2 m-i (mod 9), 

and so N — M = 0 (mod 9), that is, 9 divides N — M. 

Applying the 11-test: 

N = Oo — Oi + 02 — ■ • • + 02 m -2 — 02 m-\ (mod 11) 
whilst 

Af = Oi — O 2 + O 3 • • • — 02m-2 + 02Tn,-l — Oq (mod 11) . 

So N + M = 0 (mod 11). That is, 11 divides N + M. 

Finally, since = {N - M){N + M) we have that 9 divides 

N'^ - and 11 divides - M'^. As gcd(9,11) = 1, the Corollary to 
Theorem 1.3 allows us to conclude that 99 divides N'^ — M^. 

Solution 3.1 

(a) We evaluate Pi{x) for each of the least positive residues modulo 7, 
namely x = 0 , 1 , 2 ,3,4,5 and 6 . 

0^ + 3x0 + 4 = 4 = 4 (mod 7) 
l^+3xl + 4 = 8 = l (mod 7) 

2^+ 3x2 + 4= 14 = 0 (mod 7) 

3^+ 3x3 + 4 = 22 = 1 (mod 7) 

4^+ 3x4 + 4 = 32 = 4 (mod 7) 

5^+ 3x5 + 4 = 44 = 2 (mod 7) 

6 ^+ 3x6 + 4 = 58 = 2 (mod 7) 

So Pi{x) = 0 (mod 7) has the one solution x = 2 (mod 7). 

(b) We need to evaluate P 2 {x) on a complete set of residues. This time we The fact that P{a) = P(-a) 

shall choose the least absolute residues modulo 5 , namely influences the use of the least 

X = -2, —1, 0, 1 and 2. absolute residues for, as you see, it 

effectively reduces the number of 

^’ 2 ( 0 ) = —1 = 4 (mod 5) residues to be checked. 

^ 2 ( 1 ) = P 2 (—1) = 1 — 1=0 (mod 5) 

P 2 ( 2 ) = P2{—2) = 16 — 1 = 0 (mod 5) 

P 2 ix) = 0 (mod 5) has the four solutions x = 1,2, —2 and —1 (mod 5). 

That is, alternatively, x = 1, 2,3 and 4 (modulo 5). 
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Solutions to the Problems 


Solution 3.2 

(a) Since gcd(5,10) = 5 and 5 does not divide 13, this congruence has no 

solutions. _ 

(b) Since gcd(5,13) = 1, this congruence has a unique solution. 

(c) Since gcd(10,30) = 10 and 10 does not divide 5, this congruence has no 
solutions. 

(d) Since gcd(27,24) = 3 and 3 divides 318, this congruence has three 
solutions. 


Solution 3.3 

(a) The congruence has a unique solution modulo 53. 

2Sx = 49 (mod 53) 4a; = 7 (mod 53) Step 3 

4a; = 60 (mod 53) Step 4 
a; = 15 (mod 53) Step 3 


(b) gcd(34,52) = 2 and 2 does not divide 19 so the congruence has no 
solutions. 

(c) The congruence has a unique solution modulo 19. 


137a; = 96 (mod 19) 


4a; = 1 (mod 19) Step 4 
4a; = 20 (mod 19) Step 4 


51a; = 8 (mod 53) 


137 = 4 (mod 19) and 
96 = 1 (mod 19). 


4- X = 5 (mod 19) 

Step 3 


solution modulo 53. 

—2x = 8 (mod 53) 

Step 4 


2x = —8 (mod 53) 

Step 5 

Rather than multiply through by 

X = —4 (mod 53) 

Step 3 

— 1 and then divide by 2 we could 
simply divide through by — 2 . 

X = 49 (mod 53) 

Step 4 



(e) As gcd(18,69) = 3 and 3 divides 39, this congruence has three solutions 
modulo 69. 


18a; = 39 (mod 69) 6 a; = 13 (mod 23) Step 2 

6 a; = 36 (mod 23) Step 4 
a; = 6 (mod 23) Step 3 
a; = 6,29,52 (mod 69) 

The final step gives the derived solution in terms of the original modulus. 


We still use the equivalence symbol 
<J=4> despite the different moduli, 
because an integer a: is a solution 
of the previous congruence if, and 
only if, it is a solution of the 
following congruence. 


Solution 4.1 

Expressed in terms of congruence the three conditions to be satisfied are 

2n + 3 = 0 (mod 9); 3n + 4 = 0 (mod 16); 4n + 5 = 0 (mod 25). 

Solving these individually we have the equivalent system 

n = 3 (mod 9); n = A (mod 16); n = 5 (mod 25). 

The variables in the proof of the Chinese Remainder Theorem are: 
bi =3, 62 = 4, bs = 5, ni = 9, n 2 = 16, 713 = 25, N = 3600, 

Ni = 400, N 2 = 225, Ns = 144. 

A^ia; = 400a; = 1 (mod 9) 

N 2 X = 225a; = 1 (mod 16) 

N 3 X = 144a; = 1 (mod 25) 

Therefore 

a;o = 3 X 400 X 7 + 4 X 225 X 1 + 5 X 144 X 4 = 12180 = 1380 (mod 3600) 
and the least positive solution is n = 1380. 


4a; = 1 (mod 9) 

X = 7 (mod 9), so Xi = 7. 
a; = 1 (mod 16), so X 2 = 1 . 
19x = 1 = 76 (mod 25) 

X = 4 (mod 25), so X 3 = 4. 
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Solution 4.2 

As 165 = 3x5x11 we begin by solving the linear congruence to each of the 
moduli 3, 5 and 11. 

7x = 9 (mod 3) <t=> a: = 0 (mod 3) 

7x = 9 (mod 5) x = 2 (mod 5) 

7a; = 9 (mod 11) ■<=> a; = 6 (mod 11) 

Our task is now to solve the three congruences on the right-hand side 
simultaneously. 

a; = 6 (mod 11) => x = 6,17,... , 

increasing in steps of 11 until we reach a solution of the second congruence. 

X = 2 (mod 5) => X = 17,72,... , 

increasing in steps of 11 x 5 = 55 until we reach a solution of the remaining 
congruence. 

X = 0 (mod 3) => X = 72 (mod 165). 

Solution 4.3 

(a) This system has no solutions since gcd(12,18) = 6 and 6 does not divide 
11-7 = 4. 

(b) This system has solutions since gcd(12,18) divides 10 - 4, gcd(7,12) = 1 
(which divides all integers) and gcd(7,18) = 1 . 

X = 10 (mod 18) =» X = 10,28,..., 

X = 4 (mod 12) ^ X = 28,64,100,136,... , 

increasing in steps of lcm(12,18) = 36, 
X = 3 (mod 7) X = 136,388,640,... , 

increasing in steps of 7 x 36 = 252. 
The solution x = 136 (mod 252) is unique. 


SOLUTIONS TO ADDITIONAL 
EXERCISES 


Section 1 

1 (a) Since 1997 = 7 x 285 -|- 2, 

the least positive residue is 2, and 
the least absolute residue is 2. 

(b) Since 1997= 17 x 117-1-8, 

the least positive residue is 8, and 
the least absolute residue is 8. 

(c) Since 1997 = 101 x 19 -I- 78, 

the least positive residue is 78, and 

the least absolute residue is 78 - 101 = —23. 




If fc = 1 (mod 12) then fc = 12r + 1, for some integer r. Hence 
6 A; + 5 = 72r + ll. 

(a) As 4 divides 72, we have 6fc + 5 = 11 = 3 (mod 4), and so 3 is th^ 
required least positive residue. 

(b) As 9 divides 72, we have 6fc+ 5 = 11 = 2 (mod 9), and so 2 is the 
required least positive residue. 

(c) As 12 divides 72, we have 6fc + 5 = 11 (mod 12), and so 11 is the 
required least positive residue. 

(a) 1^ = 6^ (mod 7) but it is not the case that 1 = 6 (mod 7). 

(b) 1^ = 2^ (mod 3) and 2 = 5 (mod 3), but 1® ^ 2® (mod 3). 

Let P{n) be the proposition 6” = 5n + 1 (mod 25). 

P(l) claims that 6 = 6 (mod 25) which is trivially true. We continue by 
assuming that P{k) is true and investigate P{k + 1). 

6 *^+^ = 6 X 6 *^ s 6 X (5fc + 1), by the induction hypothesis, 

= 30fc + 6 (mod 25) 

= 5A; + 6 (mod 25) 

= 5(fc + 1) + 1 (mod 25), 

as required. 

The Principle of Mathematical Induction confirms that P{n) is true for 
all integers n > 1. 

The set of n numbers will form a complete set of residues modulo n 
provided no two of them are congruent modulo n. So, aiming for a 
contradiction, suppose that two of the numbers are congruent 
modulo n, say 

c + ra = c + sa (mod n) , where 0 < s < r < n. 

The definition of congruence would then give 
n divides (c + ra) — (c + so). 

That is, 

n divides (r — s)a. 

But gcd(a,n) = 1, and so Euclid’s Lemma leads to 
n divides r — s, 

which is impossible since 0 < r — s < n. 

There is no unique set of steps to answer these questions. You might 
well have found different ways of grouping the terms from those in the 
solutions which follow. 

(a) As 11 = 4 (mod 7), we have iP^ = 4“ (mod 7). 

Now 4^ — 16 = 2 (mod 7) and so 

nil = ^11 = ^^2^5 x4 = 2^x4 = 32x4 = 4x4 = 2 (mod 7). 

So the remainder is 2. 

(b) As 11^ = 121 = 2 (mod 17), we have 

11“ = (11^)^ X 11 = 2^ X 11 = (-2) X 11 = -5 = 12 (mod 17). 


So the remainder is 12. 
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(c) 11“ s (-8)“ = ((-8)2)5 ^ ^ ^5 X (_g) ^9) 

= 72 X 72 X 7 X (—8) = 11 X 11 X (—56) (mod 19) 

= (-8)2 X 1 = 64 = 7 (mod 19). 

So the remainder is 7. 

(a) 22® = (2^)5 X 2® = 35 X 2® = 27 X 9 X 8 (mod 29) 

= (-2) X 14 = -28 = 1 (mod 29), 

which amounts to saying that 29 divides 22® — 1. 

(b) 3®® = (3^)® X 3® = 2® X 3® s (8 X 9) X (32 X 3) X 2 = (-7) x (17) x 2 (mod 79) 
= (-119) X 2 s (-40) X 2 = -80 = -1 (mod 79). 

It follows that 79 divides 3®® + 1. 

8 Since any square is congruent modulo 3 to either 0 or 1 it follows that 
a® 4- 36® is congruent modulo 3 to either 0 or 1 (since 36® = 0 (mod 3)). 

But 3/c — 1 = 2 (mod 3), and so a® + 36® cannot be equal to 3/c — 1 for 
any integer k, regardless of whether or not it is prime. 

9 The congruences ar = b (mod n) and cr = d (mod n) tell us that there 
exist integers k and s such that ar -b = kn and cr - d — sn. 

Substituting for 6 from the first of these equations and for d from the 
second gives 

ad — be = a{cr — sn) — {ar — kn)c = n{kc — as), 
which shows that ad = be (mod n). 


Section 2 

1 (a) As 108 is divisible by 9, the right-hand side must be divisible by 9. 

Hence, by adding up the digits, 4-|-0-h0-f-(?) 4-8 = 0 (mod 9) and 
the only value of the digit (?) which renders this possible is 6. 

(b) Checking the calculation modulo 9, 

1578 X 34971 = 3 X 6 = 0 (mod 9), 

and so the sum of the digits on the right-hand side must be 
divisible by 9. Thus 

5 + 54-14-84-(?) 4-24-34-8 = 32 4-(?) = 54-(?)=0 (mod 9), 
giving (?) = 4. 

(c) The right-hand side is divisible by 11 and so the left-hand side must 
be divisible by 11. Now 4473 is not divisible by 11, and so 3(?)9 
must be. Hence (?) = 1 is the only possibility. 

2 Aiming for a contradiction, suppose that A divides B, say B = nA for 
some integer n. Now as A comprises the digits 1 to 7 we have 

A=1-|-2-|-3 + 4-f 5 + 6 + 7 = 28 = 1 (mod 9) 

and similarly B = 1 (mod 9). 

The equation B = nA then gives n = 1 (mod 9). But n = 1 gives 
B = A, which is not the case, and so n > 10. However this is impossible 
since that forces B to have more digits than A. This contradiction 
shows that no such n can exist and so A does not divide B. 
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3 The key here is to note that, as M and N have the same collection of 
digits, N = M (mod 9) or, what amounts to the same thing, 

N — M = 0 (mod 9). But X is the sum of the digits oi N — M and so 
X = 0 (mod 9). Now N — M is a. number with ten (or fewer) digits and 
so X < 90. Of all numbers not exceeding 90, the maximum sum of the 
digits is 17 (achieved by the number 89). X cannot be equal to 0 as 
that would happen if, and only if, N = M. 

Let Y be the sum of the digits of X. Then 

y = X = 0 (mod 9), where 0 < T <18. 

Thus the only possibility is T = 9. 

4 Dividing N, by 10”, the Division Algorithm gives integers q and r such 
that 

iV = 10"g + r, 0<r<10". 

Because of the restriction on r, it follows that r is the number made up 
of the last n digits of N. 

Now 2" divides 10” and so, taking congruence modulo 2”, 

N = r (mod 2”). 

Thus N = 0 (mod 2") if, and only if, r = 0 (mod 2”), that is, 2" 
divides N if, and only if, 2” divides r, the number made up of the last 
n digits of N. 

5 (a) 10^” = (10^)” = 1” = 1 (mod 99), 

102 n+i = 10 X 10 ^” = 10 (mod 99). 

(b) Let 

X — —1 • ■ ■ U 2 U 1 U 0 

= Uq + UllO + (X2l0^ + flslO^ + ■ ■ ■ + Um—llO”* ^ + UmlO*” 

= (lOoi + uq) + 10^(10a3 + 0,2) + 10'*(10a5 + 04) + ... . 
Utilizing the fact that 10^" = 1 (mod 99) we have 

N = (lOai + oo) + (lOas + 02 ) + (lOas + 04 ) + ... (mod 99), 

and the remainder on dividing by 99 can be obtained from this sum 
of pairs of digits. 

(c) Working modulo 101, the successive powers of 10 are: 

10 ° = 1 , 10 ^ = 10 , 10 ^ = - 1 , 10 ° = - 10 , 10 ^ = 1 , 10 ° = 10 , etc. 
Hence 

N — OjjYidjYi —r... (i20j\O/Q 

= Oo + fliio + 0210^ + 0310° + • • • + ajn-ilO^ 

= (lOfli + uo) “ ( 10^3 + 02 ) + ( 10^5 + 04 ) — ■ • ■ (mod 101), 

and the remainder on dividing by 101 is obtained from this 
alternating sum of pairs of digits. Now 

62 479 = 79 - 24 + 6 = 61 (mod 101) and 
9850833 = 33-8 + 85-9 = 101 = 0 (mod 101), 

so the remainders are 61 and 0 respectively. 


For example, to extract the flnal 
three digits from 1 234 567 we write 
1 234 567 = 1234 x 10° + 567. 


The last term in the summation is 
10’”“^(10am + a-m-i) if m is odd 
and 10”*(0 + am) if m is even. 
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Section 3 


1 (a) 8a; = 12 (mod 60) 2a; = 3 (mod 15) 

2x = 18 (mod 15) 

a: = 9 (mod 15) 

a; = 9,24,39,54 (mod 60) 

(b) 21a; = 35 (mod 47) 3a; = 5 (mod 47) 

3a; = —42 (mod 47) 

<=> a; = —14 = 33 (mod 47) 

(c) 6a; = 5 (mod 41) 42a; = 35 (mod 41) 

X = 35 (mod 41) 

(d) 5a; = 1 (mod 93) 95x = 19 (mod 93) 

2a; = 112 (mod 93) 
a; = 56 (mod 93) 

2 (a) Working modulo 7 gives: 

0^ = 0, 1^ = 1, 2^ = 1, 3^ = 6, 4^ = 1, 5^ = 6 and 6^ = 6. 

Therefore the equation = 1 (mod 7) has solutions 
X = 1,2,4 (mod 7). 

(b) The value of 2x^ + 4x + 5 (mod 7) for each of the seven values of x 
in a complete set of residues is given in the following table. 


X 

0 1 2 3 4 5 6 

2x^ + 4x + 5 

5 4 0 0 4 5 3 


Hence 2x^ + 4x + 5 = 0 has the two solutions x = 2,3 (mod 7). 

3 (a) 12x + 19y = 7. 

The obvious moduli to try are 12 and 19 as each of these eliminates 
one of the variables. 

Writing this equation as a congruence modulo 12: 

19y = 7 (mod 12), 
which gives 

y = I (mod 12). 

Substituting y = 1 in the original equation gives x = — 1, and so the 
general solution is 

X = — 1 + 19A:, y = 1 — 12A:, k £ Z. 

(b) 17x + 41y = 13. 

Writing this equation modulo 17 we have 

41y = 13 (mod 17) 7y = 13 (mod 17) 

35y = 65 (mod 17) multiplying by 5 
<;=» y = 14 = —3 (mod 17). 

Substituting y = —3 in the original equation gives x = 8, and hence 
the general solution is 

x = 8 + 41A:, y = -3-17A:, k£Z. 
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4 Take the uniqueness first. The congruence ax = b (mod 20) has a 
unique solution if, and only if, gcd(a, 20 ) = 1 ; that is, when 
a = 1,3,7,9,11,13,17 and 19. For each of these eight values of a there 
are twenty values of b, making 160 congruences in total for which the 
solution is unique. 

The congruence has gcd(a, 20) solutions whenever gcd(a, 20) divides b. 
So consider the possible values of gcd(a, 20) in turn. 

gcd(a, 20 ) = 1 leads to 160 solvable congruences, as already seen. 

gcd(a, 20) = 2 when a = 2, 6 , 14 and 18. For each of these four values of 
a the congruence is solvable provided b takes one of the ten even values 
0, 2, 4, 6 , 8 , 10, 12, 14, 16 or 18. Hence there are 40 congruences with 
solutions. 

gcd(a, 20) = 4 when a = 4, 8 ,12 and 16. For each of these four values of 
a the congruence has solutions when b takes one of the five values 0, 4, 
8 , 12 or 16 making 20 congruences in all. 

gcd(a, 20) = 5 when a = 5 or 15. For each of these two values of a the 
congruence has solutions if b takes one of the values 0, 5, 10 or 15 
making 8 congruences in all. 

gcd(a, 20) = 10 when a = 10. In this case the congruence is solvable 
when 6 = 0 or 10 , making 2 congruences in all. 

In all there are 230 congruences which have solutions. 


Section 4 

1 Following the proof of the Chinese Remainder Theorem, the variables 
are: ni = 4, n 2 = 5, ns — 7, N = A x 5 x 7 = 140, Ni — 35, N 2 = 28, 
N 3 = 20, bi = 1, 62 = 3, 63 = 0. 


NiXi = 1 (mod ni) 


N 2 X 2 = 1 (mod 712 ) 


N 3 X 3 = 1 (mod ns) 


35a;i = 1 (mod 4) 

3xi = 1 (mod 4), so a;i = 3. 
<=> 28x2 = 1 (mod 5) 

<t=> 3 x 2 = 1 (mod 5), so X 2 = 2. 
20 x 3 = 1 (mod 7) 

— 1 x 3 = 1 (mod 7), so X 3 = 6 . 


The solution is 

xo = 1 X 35 X 3 + 3 X 28 X 2 + 0 X 20 X 6 = 273 = 133 (mod 140). 
The smallest positive integer solution is 133. 

2 (a) We first solve the three congruences individually. 

2x = 3 (mod 5) x = 4 (mod 5) 

3x = 4 (mod 7) <=> x = 6 (mod 7) 

4x = 9 (mod 11) X = 5 (mod 11) 

Now, 

X = 5 (mod 11) ==^ X = 5,16,27,... , 

increasing by 11 to a solution of second congruence, 

X = 6 (mod 7) => X = 27,104,... , 
increasing by 11 x 7 = 77 to a solution of congruence remaining, 

and 

X = 4 (mod 5) => X = 104 (mod 385). 
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(b) As the moduli are not pairwise relatively prime a little more care 
must be taken with this one. 

X =\ (mod 4) and x = ?> (mod 6) have a unique simultaneous 
solution modulo 12 (the least common multiple of 4 and 6), since 
gcd(4,6) = 2 divides the difference 3—1. By inspection this 
solution is X = 9 (mod 12). 

X = 9 (mod 12) and x = 3 (mod 9) have a unique simultaneous 
solution modulo 36 (the least common multiple of 12 and 9), since 
gcd(12,9) = 3 divides the difference 9 — 3. 

X = 9 (mod 12) => X = 9,21,..., 

and 

X = 3 (mod 9) X = 21 (mod 36). 
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2310 = 2x3x5x7x11 and so we require the simultaneous solution 
of the system; 

19x = 7 (mod 2); 19x = 7 (mod 3); 19x = 7 (mod 5); 

19x = 7 (mod 7); 19x = 7 (mod 11). 

Solving these individually gives the equivalent system: 


X = 1 (mod 2); x = 1 (mod 3); x = 3 (mod 5); 
X = 0 (mod 7); x = 5 (mod 11). 

Now 


X = 1 (mod 2) 
X = 1 (mod 3) 
X s 3 (mod 5) 

X = 0 (mod 7) 



X = 1,... , increasing in steps of 2, 

X = 1,7,13,... , increasing in steps of 6, 
x = 13,43,73,103,133,... , 

increasing in steps of 30, 
x= 133,343,553,763,973,... , 

increasing in steps of 210. 


Finally, 


X = 5 (mod 11) => X = 973 (mod 2310). 


The order in which the individual 
congruences are incorporated does 
not matter. We have usually 
started with the one with largest 
modulus, but here we have chosen 
the opposite order. 


4 Translated into a problem in simultaneous congruences we have to solve 
the system: 

n = 0 (mod 9); n = 15 (mod 16); n = 23 (mod 25). 

Now 

n = 23 (mod 25) n = 23,48,73,98,123,148,173,198,223,... , 

increasing in steps of 25, 

n = 15 (mod 16) ^ n = 223,623,1023,1423,1823,2223,... , 

increasing in steps of 16 x 25 = 400. 

Finally 

n = 0 (mod 9) => n = 2223 (mod 3600). 
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5 The arithmetic progression comprises numbers of the form llfc + 7, so 
three consecutive terms of the sequence are lln + 7, lln + 18 and 
lln + 29. Our task is therefore to solve, for n, the system of linear 
congruences: 

lln + 7 = 0 (mod 2); lln + 18 = 0 (mod 3); lln + 29 = 0 (mod 5), 
which, after simplification becomes 

n = 1 (mod 2); n = 0 (mod 3); n = 1 (mod 5). 

The first and third of these congruences require that n = 1 (mod 10), so 
n= 1,11,21,... . 

The first number in this sequence to satisfy the remaining congruence, 
n = 0 (mod 3), is n = 21. The three numbers in the arithmetic 
sequence are therefore 238, 249 and 260. 

6 To be in a position to apply Theorem 4.2 we must first solve each 
individual congruence. 

5a; = c (mod 12) 25a; = 5c (mod 12) x = 5c (mod 12) 

7x = 2 (mod 30) <;=> lx = —28 (mod 30) a; = —4 = 26 (mod 30) 

The system has solutions when gcd(12,30) divides 26 — 5c; that is, 
when 6 divides 26 — 5c. 

5c = 26 (mod 6) 5c = 20 (mod 6) <^==^ c = 4 (mod 6). 

So the system has a simultaneous solution when c = 4 (mod 6). 

7 The number of gold coins n satisfies each of the congruences 

n = 4 (mod 17); n = 10 (mod 16); n = 0 (mod 15). 

Now 


n = 4 (mod 17) n = 4,21,38,55,72,89,106,..., 

n= 10 (mod 16) n = 106,378,650,922,1194,1466,1738,2010,... , 

increasing in steps of 16 x 17 = 272, 


and 


n = 0 (mod 15) => n = 2010 (mod 15 x 16 x 17). 
The least possible number of coins is 2010. 
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